Skip to content

Update Lightning and fix workflow checks - #2

Open
snamber wants to merge 2 commits into
mainfrom
security/lightning-2.6.6
Open

Update Lightning and fix workflow checks#2
snamber wants to merge 2 commits into
mainfrom
security/lightning-2.6.6

Conversation

@snamber

@snamber snamber commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Summary

  • update lightning and pytorch-lightning from 2.6.5 to 2.6.6
  • remediate GHSA-qqmf-gpg7-g8gw / CVE-2026-58659
  • fix the existing workflow formatting and type-check diagnostics
  • document the supported local cache configuration for development without Google Cloud credentials

The upstream 2.6.6 release explicitly includes the _instantiator allowlist fix from Lightning-AI/pytorch-lightning#21832. The PyPA advisory identifies 2.6.6 as the fixed version.

Validation

  • uv lock --check
  • uv sync --locked
  • uv run ruff check .
  • uv run ruff format --check .
  • uv run ty check
  • uv run python -m compileall -q datacenters
  • imported the workflow with WORKFLOW_CACHE_BUCKET="" and verified it uses LocalFileSystemCache
  • verified an empty CSV response is rejected
  • verified NPZ data round-trips
  • verified ranking output remains score-ordered and uses a Z UTC timestamp
  • imported lightning and pytorch_lightning and verified both report 2.6.6

@snamber snamber changed the title Update Lightning to 2.6.6 Update Lightning and fix workflow checks Sep 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant